Privacy

Fabio Hase
Bavaria
Germany
jobs@fabiohase.com

Delivering a page needs your IP address — without it there is nowhere to send the response. The host records it with the request. Per request, that is:

• your IP address
• the date and time
• the page or file requested
• the referring page, if your browser sends one
• the browser and operating system your browser reports

Purpose: delivering the site and defending it against attack. Legal basis: Art. 6 (1) (f) GDPR — a legitimate interest in a site that works and stays up. These records are not joined to anything else, not used to recognise you on a later visit, and not used to build a profile.

The site is a folder of static files. It is served by Vercel, which processes the log data above on my instruction as a processor under Art. 28 GDPR.

Archivo, Source Serif 4 and IBM Plex Mono are served from this domain as woff2 files, installed with the site. Google Fonts is not used and no request reaches Google’s font servers, so your IP address is never passed to Google in order to render the type you are reading.

• No cookies, no local storage, no session storage.
• No analytics, no tag manager, no tracking pixel. Nothing counts you, so there is no count to opt out of.
• No consent banner, because there is nothing to consent to. A banner here would be theatre.
• No contact form, no account, no comments, no newsletter.
• No embedded video, map, font, icon set or social widget. Every image is a file on this domain.
• No automated decision-making and no profiling.

Mail sent to the address above is processed to answer it. Legal basis: Art. 6 (1) (b) GDPR where it concerns a possible internship or engagement, otherwise Art. 6 (1) (f). It is kept while the exchange is live and for as long as I am required to keep it, then deleted. Mail is not encrypted in transit unless we both arrange it.

This site links to LinkedIn. Following such a link hands you to that operator, whose privacy policy applies from that point on and over which I have no influence.

You can, at any time and free of charge, ask me to:

• tell you what data about you I hold (Art. 15)
• correct it (Art. 16) or delete it (Art. 17)
• restrict its processing (Art. 18) or hand it over in a portable form (Art. 20)
• stop processing carried out on the legitimate-interest basis, on grounds arising from your situation (Art. 21)

In practice there is very little to ask about: unless you have written to me, the only record of your visit is a log line at the host. You can also complain to a data protection supervisory authority, either where you live or where I am established (Art. 77).